Stabilize app-server cancellation test

Allow slower CI runners enough time to observe the fake app-server SIGTERM record while keeping the cancellation assertion intact.

Co-Authored-By: OpenAI Codex <noreply@openai.com>

Author: xuio

test/app-server-hardening.test.ts

@@ -252,7 +252,7 @@ describe("app-server hardening", () => {
     const sawSigterm = await waitFor(async () => {
       const calls = await recordedCalls(recordDir);
       return calls.some((call) => call.method === "process/sigterm");
-    });
+    }, 10_000);
     expect(sawSigterm).toBe(true);
   });